Cert Cc

このタグに関連する脆弱性 3

• 未評価 CVE 公開前 VU#166125: Bisheng has authentication bypass vulnerabilities CVE-2026-96679 (Legacy SSO Bypass) A vulnerability resides in the legacy SSO endpoint (POST /user/sso). The application processes incoming JSON payloads containing arbitrary usernames and issues a valid JSON Web Token (JWT) without enforcing any form of caller authentication, such as signature verif... CVE-2026-96679 2:42
• 未評価 CVE 公開前 VU#166125: Bisheng has authentication bypass vulnerabilities CVE-2026-96681 (IDOR Workflow Exposure) There are missing authorization controls across multiple version retrieval endpoints. The underlying source code retrieves flow and workflow version records based on user-supplied parameters without performing any data ownership or permission validation. Any a... CVE-2026-96681 2:42
• 未評価 CVE 公開前 VU#166125: Bisheng has authentication bypass vulnerabilities CVE-2026-100156 (Credential Abuse & Access Control Skip) Within the assistant service's prompt auto-optimization feature, endpoints accept an assistant identifier from the caller without verifying whether the caller owned that assistant. An assistant identifier is a mechanism that lets users or syst... CVE-2026-100156 2:42